[
https://issues.jboss.org/browse/SECURITY-793?page=com.atlassian.jira.plug...
]
Darran Lofthouse commented on SECURITY-793:
-------------------------------------------
There is a limit regarding how far we can go implementing this feature - we can
pro-actively send the BASIC auth challenge early, we can also send the BASIC challenge if
we do not like the response type from the browser but one thing that we can not do is stop
the web browser from sending us an NTLM response - this does mean in some cases the end
user may be asked twice for their username and password.
Add support to fall back to BASIC authentication.
-------------------------------------------------
Key: SECURITY-793
URL:
https://issues.jboss.org/browse/SECURITY-793
Project: PicketBox
Issue Type: Task
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: Negotiation_2_1_5
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira